I am from India and hold a credit card. While transacting in India, it always takes me to 3D Secure authentication page. But while paying in AliExpress, it never takes me to 3D Secure page, yet approves the payment.

Could anyone please explain why it happens or if I can enforce 3D Secure from my side by any means?

  • The business needs to support it, so unless you can make AliExpress change their process, your only options are to live without or not shop there. – Aganju Jun 17 '17 at 9:19
  • Thnaks for the response @Aganju. Can my bank ensure that the payment is not approved if not verified by 3D Secure? Do they have the authority to? – Arumoy Chakraborty Jun 17 '17 at 9:25
  • It would be defined in your credit card contract, but pretty sure it is not there. Large parts of the world don't use 3D, so if your bank would enforce it, your card would be unusable for travel into most if the world. – Aganju Jun 17 '17 at 9:29
  • @Aganju thanks a lot. This is what I found out – Arumoy Chakraborty Jun 17 '17 at 11:49

Could anyone please explain why it happens

In general the approach banks take to managing card fraud on "card not present" payments is to make the merchant pay for it. The merchant then gets to decide on what extra security features to use and hence on the balance between user connivance, implementation complexity and fraud protection.

  • 1
    Thanks for the answer. I just spoke to my bank. Turns out inside India, RBI, the central bank, enforces that every merchant has to use 2 factor auth. That is not the case with AliExpress as they're Chinese and RBI has no jurisdiction there. So only if my bank enforces it, it's possible, but it's private bank and security sort of takes a back seat to user convenience(!). So probably there's not much I can do. – Arumoy Chakraborty Jun 17 '17 at 11:37
  • The network decides on liability rules, not the bank. @Arumoy This isn't a matter of "jurisdiction". A bank can refuse to authorize a transaction regardless of where the merchant is. – Acccumulation Jun 28 '18 at 20:56

Card can be of two types,2d secure and 3d secure.So as payment gateways can be also 2d secure and 3d secure. If a 3d secure card goes through a 2d secure payment gateway it would not ask for otp. All Indian based payment service providers are 3d secure as per RBL mandate. but thats not the case with International payment gateways

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.